CVE-2005-2762 : Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VP

Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials.

Published 2005-12-31 05:00:00

Updated 2008-09-05 20:52:38

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2005-2762

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 7 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

Avaya » Vpnremote » Version: 4.2.26
cpe:2.3:a:avaya:vpnremote:4.2.26:*:*:*:*:*:*:*
Matching versions
Avaya » Vpnremote » Version: 4.2.30
cpe:2.3:a:avaya:vpnremote:4.2.30:*:*:*:*:*:*:*
Matching versions
Avaya » Vpnremote » Version: 4.2.23
cpe:2.3:a:avaya:vpnremote:4.2.23:*:*:*:*:*:*:*
Matching versions
Avaya » Vpnremote » Version: 4.2.24
cpe:2.3:a:avaya:vpnremote:4.2.24:*:*:*:*:*:*:*
Matching versions
Avaya » Vpnremote » Version: 4.2.29
cpe:2.3:a:avaya:vpnremote:4.2.29:*:*:*:*:*:*:*
Matching versions
Avaya » Vpnremote » Version: 4.2.32
cpe:2.3:a:avaya:vpnremote:4.2.32:*:*:*:*:*:*:*
Matching versions